Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/323830343a353931633a3a2f33322d3438203d3e203238333730.roa
File:                     323830343a353931633a3a2f33322d3438203d3e203238333730.roa (raw, json)
Hash identifier:          TnZreNb6omB7UFehykUHp3+0dwhaiNvUfCVdAYRFoH8=
Subject key identifier:   BA:75:01:F9:5E:15:68:77:B9:D3:47:04:B5:C5:27:F0:CA:95:E8:86
Certificate issuer:       /CN=ACED7F3D5F45458F3754EC755B6951DE6D19CDDE
Certificate serial:       527D46C1F7A9DB9FA3C8B7A113C1DFC09B98E260
Authority key identifier: AC:ED:7F:3D:5F:45:45:8F:37:54:EC:75:5B:69:51:DE:6D:19:CD:DE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/323830343a353931633a3a2f33322d3438203d3e203238333730.roa
Signing time:             Wed 07 Feb 2024 23:07:17 +0000
ROA not before:           Wed 07 Feb 2024 23:02:17 +0000
ROA not after:            Wed 05 Feb 2025 23:07:17 +0000
asID:                     28370
IP address blocks:        2804:591c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:7d:46:c1:f7:a9:db:9f:a3:c8:b7:a1:13:c1:df:c0:9b:98:e2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACED7F3D5F45458F3754EC755B6951DE6D19CDDE
        Validity
            Not Before: Feb  7 23:02:17 2024 GMT
            Not After : Feb  5 23:07:17 2025 GMT
        Subject: CN=BA7501F95E156877B9D34704B5C527F0CA95E886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:32:7f:53:c9:1a:01:77:8c:96:18:8e:67:1b:
                    87:ae:0f:08:8a:6d:69:2c:0d:b7:b1:a3:eb:09:8d:
                    6b:ee:33:a2:91:06:2e:76:8c:8f:cf:df:8d:f0:3d:
                    f3:c7:0f:0e:09:b7:37:1f:a7:04:78:e6:78:cd:af:
                    fe:a5:2f:f9:35:d2:17:4b:13:dd:f9:b2:eb:6a:27:
                    5b:4a:e7:a5:2e:a7:89:9f:d3:db:42:b9:46:47:9a:
                    ab:03:87:c7:30:4f:09:23:06:53:c8:33:09:cb:7c:
                    c0:ad:0f:91:ac:ed:57:84:f6:1f:fd:28:73:4a:ae:
                    63:5d:9d:73:e4:14:7f:19:78:39:29:3c:64:29:90:
                    8e:59:46:35:bf:24:bb:60:ed:4e:1f:5a:77:6c:b2:
                    a1:d6:d3:a0:94:9d:fd:5d:4d:c1:04:3e:4e:13:d4:
                    bd:57:23:86:f7:36:df:50:7e:3a:35:2c:7a:89:3f:
                    43:33:24:14:0c:3a:e3:0d:f9:c4:14:2c:29:98:f0:
                    b1:df:a5:65:1c:6e:97:d4:47:39:b0:6b:5b:4a:16:
                    22:dc:88:a1:ad:cd:8e:3f:5d:1f:0d:50:0b:2b:5d:
                    72:a8:ef:8a:6e:c4:c2:73:a2:ea:25:58:fb:a4:2a:
                    2b:4e:58:ff:66:ab:9c:74:1c:8c:4e:c3:a8:5b:77:
                    f9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:01:F9:5E:15:68:77:B9:D3:47:04:B5:C5:27:F0:CA:95:E8:86
            X509v3 Authority Key Identifier:
                keyid:AC:ED:7F:3D:5F:45:45:8F:37:54:EC:75:5B:69:51:DE:6D:19:CD:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACED7F3D5F45458F3754EC755B6951DE6D19CDDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HrgJEbRsQzZPQBBHdkzxngKKapi92F7yCyDZaz9rVkFR/0/323830343a353931633a3a2f33322d3438203d3e203238333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:591c::/32

    Signature Algorithm: sha256WithRSAEncryption
         89:3b:0e:9f:c0:ce:db:d0:84:de:5f:d1:56:7c:c1:60:a6:e7:
         2d:81:b9:b8:c8:e9:5f:84:20:0d:8d:a9:ce:1b:a3:aa:f7:cc:
         55:65:28:2b:c4:17:32:ea:e2:bc:51:51:2c:5e:19:cc:64:00:
         ec:d4:55:4b:9a:51:74:b0:1e:83:da:15:64:32:50:ac:49:71:
         4e:89:81:82:83:b1:e1:38:1b:df:d8:cf:bb:f9:d8:51:53:16:
         64:6c:c9:c0:2f:02:51:67:a5:3f:c7:d5:a7:66:a2:51:cd:70:
         a8:96:06:31:73:88:56:a8:9d:4f:8e:5d:4e:db:e0:26:d2:b9:
         f6:fc:57:3a:c9:f5:bb:ad:30:53:79:2c:58:3a:fc:c1:90:6c:
         23:98:2e:2b:80:1f:e6:48:17:79:35:a2:c6:e9:56:4e:e2:a4:
         b2:6a:32:97:de:ed:8d:ee:a4:f9:b3:a8:c4:71:59:0f:13:5f:
         7d:93:aa:ec:74:3a:c4:e0:2c:ef:30:bb:77:99:0e:46:3a:92:
         78:dc:f1:b0:bd:49:7a:91:83:d9:de:ec:31:40:ea:89:b0:8b:
         0c:a3:3f:fc:d1:a7:db:b6:bd:15:22:96:58:b6:f7:c8:96:35:
         1b:99:02:e6:3d:12:f5:36:b3:09:0d:a1:56:52:08:4e:ad:9f:
         bc:b5:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----